Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft
File:                     zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft (raw, json)
Hash identifier:          O4s1YxIMw8v5Yk0TLnjcnUrJXGj/qppsSRfndQCYFg0=
Subject key identifier:   F3:7E:F6:62:31:27:22:93:A5:A1:CA:50:97:10:C5:AB:DB:3B:BE:95
Authority key identifier: CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29
Certificate issuer:       /CN=A9173D5E/serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft
Manifest number:          47
Signing time:             Sat 13 Jun 2026 08:27:56 +0000
Manifest this update:     Sat 13 Jun 2026 08:27:56 +0000
Manifest next update:     Sat 20 Jun 2026 08:27:56 +0000
Files and hashes:         1: zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl (hash: rUl2E7vru7YIuY+/9TrnLIqJe25/uqd7FkxXzvM4fDA=)
                          2: F7973D44FE6711F0B3245786536F56BC.roa (hash: /9TND/Fy3tWH0r9sdB0hp5hcFJoR57Y+G7/U1zoHag4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl
                          rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:27:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173D5E, serialNumber=CDB42116233B42EF63257597D56D12ABFFD6DE29
        Validity
            Not Before: Jun 13 08:27:56 2026 GMT
            Not After : Jun 20 08:27:56 2026 GMT
        Subject: CN=6a2d148c-675a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3b:5f:88:aa:4d:4f:e7:6a:33:70:54:c8:e2:
                    5b:b3:8e:08:89:8b:50:6a:a2:f2:8f:86:83:70:57:
                    7e:1e:99:f5:39:9a:aa:17:60:2e:44:d4:4b:56:66:
                    9e:48:26:df:48:a3:e4:b6:8e:58:f2:53:2e:f3:18:
                    6b:22:85:7f:30:d2:87:b5:48:cb:7d:bc:31:c0:21:
                    5b:9b:cb:2e:25:90:76:42:b7:52:f2:71:ad:28:9f:
                    72:92:53:b7:0e:1f:16:82:84:ec:c7:ad:1d:62:b9:
                    0c:fe:14:3d:cc:5f:68:f0:23:c1:77:ff:3d:21:c1:
                    66:d5:8e:5c:8d:f5:fc:9f:28:61:43:8b:4b:ee:9f:
                    06:8f:79:58:29:ce:19:69:c9:4f:b5:1a:68:cd:fe:
                    a9:78:d1:a2:12:91:81:ce:3d:a6:fb:91:a8:c4:a2:
                    d7:e6:65:3d:d3:ed:8a:d2:b5:55:51:3f:a6:6d:b4:
                    e0:b0:be:43:94:c8:99:45:1c:a4:1e:ab:62:45:67:
                    fe:35:27:a9:9e:47:7e:83:10:12:8c:58:b3:a7:5a:
                    a3:36:3e:59:81:3a:f9:a7:43:8a:2e:da:f7:cf:02:
                    b3:8e:27:ce:38:b2:89:ca:85:86:56:39:73:d7:68:
                    34:70:6a:19:ba:2d:f4:f3:ed:55:ae:b0:d5:5d:b9:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:7E:F6:62:31:27:22:93:A5:A1:CA:50:97:10:C5:AB:DB:3B:BE:95
            X509v3 Authority Key Identifier:
                keyid:CD:B4:21:16:23:3B:42:EF:63:25:75:97:D5:6D:12:AB:FF:D6:DE:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173D5E/346ECF12FE6711F0A75C8852536F56BC/zbQhFiM7Qu9jJXWX1W0Sq__W3ik.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b4:2e:9c:09:a0:fe:59:d2:36:bf:00:61:1f:b2:60:e8:81:
         fc:25:18:ca:94:55:37:65:3d:2c:7c:a5:ed:0d:68:85:e3:1a:
         fc:13:80:9d:78:42:e0:31:8f:91:c4:6a:ba:d3:28:b4:ad:ec:
         19:97:23:4d:82:46:e7:46:e3:9a:5a:4f:b4:80:a2:8e:91:53:
         7c:0b:94:21:f1:d9:8b:36:fa:78:a5:6e:ed:f1:74:b5:81:44:
         72:8a:2b:28:cb:46:e2:ab:4b:ba:b5:45:db:63:32:cd:dd:de:
         d8:e5:6d:49:2a:66:a3:8c:03:8a:74:22:fb:81:dd:0e:15:b4:
         0e:50:5e:7a:e9:15:49:f3:8a:fb:d4:10:86:40:b8:bd:a4:42:
         6b:f2:15:c4:50:bc:3c:f1:f0:2d:d2:1f:12:1a:ac:ea:f9:8a:
         b1:e2:90:2f:2c:2d:20:7d:b8:f9:85:21:15:69:ee:ac:fa:ba:
         cb:88:9e:3a:c5:89:d6:82:ac:30:56:92:28:e7:df:15:e5:97:
         8f:33:aa:a5:fc:de:02:40:12:fc:26:96:d0:ca:22:53:8c:04:
         7e:e1:08:ce:c6:82:25:b9:15:37:dc:0f:15:3f:60:34:bd:bc:
         73:5c:c9:a2:e9:9f:06:eb:1d:03:79:c3:66:51:6e:9c:b8:79:
         d2:b5:7f:01
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
M0Q1RTExMC8GA1UEBRMoQ0RCNDIxMTYyMzNCNDJFRjYzMjU3NTk3RDU2RDEyQUJG
RkQ2REUyOTAeFw0yNjA2MTMwODI3NTZaFw0yNjA2MjAwODI3NTZaMBgxFjAUBgNV
BAMTDTZhMmQxNDhjLTY3NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCXO1+Iqk1P52ozcFTI4luzjgiJi1BqovKPhoNwV34emfU5mqoXYC5E1EtWZp5I
Jt9Io+S2jljyUy7zGGsihX8w0oe1SMt9vDHAIVubyy4lkHZCt1Lyca0on3KSU7cO
HxaChOzHrR1iuQz+FD3MX2jwI8F3/z0hwWbVjlyN9fyfKGFDi0vunwaPeVgpzhlp
yU+1GmjN/ql40aISkYHOPab7kajEotfmZT3T7YrStVVRP6ZttOCwvkOUyJlFHKQe
q2JFZ/41J6meR36DEBKMWLOnWqM2PlmBOvmnQ4ou2vfPArOOJ844sonKhYZWOXPX
aDRwahm6LfTz7VWusNVdudrrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQU8372YjEn
IpOlocpQlxDFq9s7vpUwHwYDVR0jBBgwFoAUzbQhFiM7Qu9jJXWX1W0Sq//W3ikw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczRDVFLzM0NkVDRjEyRkU2
NzExRjBBNzVDODg1MjUzNkY1NkJDL3piUWhGaU03UXU5akpYV1gxVzBTcV9fVzNp
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvemJRaEZpTTdRdTlqSlhXWDFXMFNxX19XM2lrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcz
RDVFLzM0NkVDRjEyRkU2NzExRjBBNzVDODg1MjUzNkY1NkJDL3piUWhGaU03UXU5
akpYV1gxVzBTcV9fVzNpay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAjtC6cCaD+WdI2vwBhH7Jg6IH8JRjKlFU3ZT0sfKXtDWiF4xr8E4CdeELgMY+R
xGq60yi0rewZlyNNgkbnRuOaWk+0gKKOkVN8C5Qh8dmLNvp4pW7t8XS1gURyiiso
y0biq0u6tUXbYzLN3d7Y5W1JKmajjAOKdCL7gd0OFbQOUF566RVJ84r71BCGQLi9
pEJr8hXEULw88fAt0h8SGqzq+Yqx4pAvLC0gfbj5hSEVae6s+rrLiJ46xYnWgqww
VpIo598V5ZePM6ql/N4CQBL8JpbQyiJTjAR+4QjOxoIluRU33A8VP2A0vbxzXMmi
6Z8G6x0DecNmUW6cuHnStX8B
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:20:19 2026 by rpki-client